| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1551 - Vulnerability Scanning | Update Tool Capability | ||
| Id | 5bbda922-0172-4095-89e6-5b4a0bf03af7 | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Risk Assessment control | ||
| Additional metadata |
Name/Id: ACF1551 / Microsoft Managed Control 1551 Category: Risk Assessment Title: Vulnerability Scanning | Update Tool Capability Ownership: Customer, Microsoft Description: The organization employs vulnerability scanning tools that include the capability to readily update the information system vulnerabilities to be scanned. Requirements: The vulnerability scanning tools used within the Azure environment include the capability to readily update the list of information system vulnerabilities to be scanned. The tools release new vulnerability definitions as needed following the publication of Common Vulnerability and Exposures (CVE) information. New signature files are updated either before each scan or, for Qualys off-node scan signatures, at least weekly, with scans performed daily. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|